Azure Container Apps pass a json string array as Environment variable ARM Deployment template language expression evaluation failed

Question

Hi
I need some help with the below code. I guess it should be possible to pass an array as a string as Env Var in bicep, right?

Error
Error> Deployment template language expression evaluation failed: 'The language expression '{"tenantId":"ZZZZZZZZ-3620-4f6b-9945-c2c01d239f6a","displayName":"abc"},{"tenantId":"YYYYYYYY-215c-4470-bde5-50dbd1ad11c2","displayName":"xzy"}' is not valid: the string character '{' at position '0' is not expected.'. Please see https://aka.ms/arm-functions for usage details. '

main.parameters.json
"customerTenants": {

      ``"value":[

        ``{

          ``"tenantId": “XXXXXXXX-3620-4f6b-9945-c2c01d239f6a",

          ``"displayName": “abc”

        ``},

        ``{

          ``"tenantId": “ZZZZZZZZ-215c-4470-bde5-50dbd1ad11c2",

          ``"displayName": “x”zy

        ``}

      ``]

    ``}

main.bicep

@description('List of customer tenants with tenantId and displayName.')
 param customerTenants array =[]


var serializedCustomerTenants = string(customerTenants)

// Extract displayNames into a separate array
var displayNames = [for tenant in customerTenants: tenant.displayName]

// Combine storageContainerName with displayNames
var storageContainerNames = union([storageContainerName], displayNames)

// Extract tenantIds into a separate array
var tenantIds = [for tenant in customerTenants: tenant.tenantId]


var postgresServerName = '${prefix}-postgresql'
var postgresDatabaseName = 'postgres'
var databaseNames = union([postgresDatabaseName], displayNames)
var serializedDatabaseNames = string(databaseNames)


var webAppEnvObj = {
  POSTGRES_HOST: postgresServer.outputs.POSTGRES_DOMAIN_NAME
  POSTGRES_USERNAME: webAppIdentityName
  POSTGRES_DATABASES: serializedDatabaseNames
  CUSTOMER_TENANTS_ARRAY: serializedCustomerTenants

}

module web 'web.bicep' = {
    name: 'web'
    scope: resourceGroup
    params: {
      // Required params
      name: replace('${take(prefix,19)}-ca', '--', '-')
      location: location
      tags: tags
      identityName: webAppIdentityName
      containerAppsEnvironmentName: containerApps.outputs.environmentName
      containerRegistryName: containerApps.outputs.registryName
      exists: webAppExists
      azureContainerAppsWorkloadProfile: azureContainerAppsWorkloadProfile
      additionalEnvVars: webAppEnvObj
      allowedOrigins: allowedOrigins
      // Security / Auth
      authClientSecretName: authClientSecretName
      authClientId: authClientId
      authAuthority: authAuthority
      serverAppId: serverAppId
      serverAppSecretName: serverAppSecretName
      authTenantId: authTenantId
      secrets: containerSecrets
      envSecrets: containerEnvSecrets
      // Boolean flags
      useAuthentication: useAuthentication
      enableGlobalDocumentsAccess: enableGlobalDocumentsAccess
      // Additional param
      keyVaultName: keyVault.outputs.name
      keyVaultResourceId: keyVault.outputs.Id
    }
  }

web.bicep

module app 'core/host/container-app-upsert.bicep' = {
  name: '${serviceName}-container-app-module'
 
  params: {
    name: name
    location: location
    tags: union(tags, { 'azd-service-name': serviceName })
    identityName: webIdentity.name
    exists: exists
    workloadProfile: azureContainerAppsWorkloadProfile
    containerAppsEnvironmentName: containerAppsEnvironmentName
    containerRegistryName: containerRegistryName
    identityType: 'UserAssigned'
    containerCpuCoreCount: '1.0'
    containerMemory: '2Gi'
    allowedOrigins: allowedOrigins
    containerMinReplicas: 1
    env: union(
      env,
      additionalEnvVars,{
        AZURE_CLIENT_ID: webIdentity.properties.clientId
        APP_IDENTITY_NAME: webIdentity.name
       
      }
      )
    secrets: secrets
    envSecrets: envSecrets  
    targetPort: 8000
  }
}

container-app-upsert.bicep

var envAsArray = [
  for key in objectKeys(env): {
    name: key
    value: '${env[key]}'
  }
]




module app 'container-app.bicep' = {
  name: '${deployment().name}-update'
  params: {
    name: name
    workloadProfile: workloadProfile
    location: location
    tags: tags
    identityType: identityType
    identityName: identityName
    ingressEnabled: ingressEnabled
    containerName: containerName
    containerAppsEnvironmentName: containerAppsEnvironmentName
    containerRegistryName: containerRegistryName
    containerRegistryHostSuffix: containerRegistryHostSuffix
    containerCpuCoreCount: containerCpuCoreCount
    containerMemory: containerMemory
    containerMinReplicas: containerMinReplicas
    containerMaxReplicas: containerMaxReplicas
    daprEnabled: daprEnabled
    daprAppId: daprAppId
    daprAppProtocol: daprAppProtocol
    secrets: secrets
    keyvaultIdentities: keyvaultIdentities
    allowedOrigins: allowedOrigins
    external: external
    env: concat(envAsArray, envSecrets)
    imageName: !empty(imageName) ? imageName : exists ? existingApp.properties.template.containers[0].image : ''
    targetPort: targetPort
    serviceBinds: serviceBinds
  }
}

Error>
Deployment template language expression evaluation failed: 'The language expression '{"tenantId":"ZZZZZZZZ-3620-4f6b-9945-c2c01d239f6a","displayName":"abc"},{"tenantId":"YYYYYYYY-215c-4470-bde5-50dbd1ad11c2","displayName":"xzy"}' is not valid: the string character '{' at position '0' is not expected.'. Please see https://aka.ms/arm-functions for usage details. '